Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual page 36

Contents
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Configuring IPsec Network Security
37
C H A P T E R
Cisco MDS 9000 Family CLI Configuration Guide
xxxvi
Manual Enrollment Using Cut-and-Paste Method
Multiple RSA Key-Pair and Identity CA Support
Peer Certificate Verification
CRL Downloading, Caching, and Checking Support
OCSP Support
36-5
Import and Export Support for Certificates and Associated Key Pairs
Configuring CAs and Digital Certificates
Configuring the Host Name and IP Domain Name
Generating an RSA Key-Pair
Creating a Trust Point CA Association
Authenticating the CA
Configuring Certificate Revocation Checking Methods
Generating Certificate Requests
Installing Identity Certificates
Ensuring Trust Point Configurations Persist Across Reboots
Monitoring and Maintaining CA and Certificates Configuration
Exporting and Importing Identity Information in PKCS#12 Format
Configuring a CRL
Deleting Certificates from the CA Configuration
Deleting RSA Key-Pairs from Your Switch
Displaying Key-Pair and CA Information
Example Configurations
Configuring Certificates on the MDS Switch
Downloading a CA Certificate
Requesting an Identity Certificate
Revoking a Certificate
Generating and Publishing the CRL
Downloading the CRL
Importing the CRL
36-35
Maximum Limits
36-37
Default Settings
36-38
About IPsec
37-2
About IKE
37-3
IPsec Prerequisites
37-3
Using IPsec
37-4
IPsec Compatibility
IPsec and IKE Terminology
36-4
36-5
36-6
36-8
36-8
36-10
36-11
36-14
36-15
36-15
36-16
36-19
36-23
36-29
36-32
36-33
37-1
37-4
37-5
36-4
36-4
36-5
36-5
36-6
36-9
36-12
36-13
36-13
36-14
36-15
OL-18084-01, Cisco MDS NX-OS Release 4.x